Debian: Security Advisory (DSA-2786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2786

Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file...

CVE-2013-2786

Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file...

CVE-2013-2786

The CVE-2013-2786 issue affects Alstom Grid MiCOM S1 Agile (all versions up to and including 1.0.2) and legacy MiCOM S1 Studio, due to weak permissions in the MiCOM S1 Program Files directory that allow a local attacker to replace executables with Trojan horses. This local-privilege-escalation fl...

CVE-2012-2786

CVE-2012-2786 is a Libav/FFmpeg vulnerability in the decode_wdlt path (libavcodec/dfa.c) that causes an out-of-bounds write when width/height are not correctly handled. Affected products and versions from connected sources include FFmpeg prior to 0.11 and Libav prior to 0.7.7 (0.7.x) and 0.8.4 (0...

Google Chrome Multiple Vulnerabilities - August11 (MacOSX)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug11macosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome Multiple Vulnerabilities - August11 MacOSX Authors: Rachana Shetty Copyright: Copyright c 2011...

CVE-2011-2786

Chrome prior to 13.0.782.107 is affected. The issue stems from the speech-input bubble not being reliably shown on screen, which could allow a remote attacker to record audio via a crafted web page containing an INPUT element. The provided documents describe the vulnerability and its potential im...

Google Fixes 30 Bugs in Chrome, Pays $17K in Bounties

Google has fixed 30 bugs in version 13.0.782.107, the latest build of its Chrome browser, pushed to the stable channel for Windows, Mac and Linux today. 14 of the bugs are deemed high-risk, including cross-origin script injection, HTML range handling and URI handling issues. Nine of the bugs are...

CVE-2010-2786

Piwik 0.6 through 0.6.3 are vulnerable to directory traversal that enables arbitrary local-file inclusion via a crafted data-renderer request (LFI). This can impact confidentiality, integrity, and availability as described in the CVE entry. Upgrade to 0.6.4 or later to remediate.

CVE-2009-2786

The CVE-2009-2786 entry concerns a SQL injection in the Reputation plugin for PunBB. Affected is reputation.php across Reputation plugin versions 2.2.4, 2.2.3, 2.0.4 and earlier. The root cause is an injection vulnerability via the poster parameter, allowing remote attackers to execute arbitrary ...

Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)

The remote host is missing updates announced in advisory GLSA 200606-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mozilla Firefox 3远程命令执行漏洞

BUGTRAQ ID: 29794 CVECAN ID: CVE-2008-2786 Firefox是一款流行的开放源码WEB浏览器。 远程攻击者可以利用最新版的Firefox 3处理恶意网页内容时的缓冲区溢出漏洞导致在浏览器会话中执行任意代码。 Mozilla Firefox 3.0 Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/...

CVE-2008-2786

MODE C: Affected Mozilla stack in 2008 (Firefox/Thunderbird/XULRunner/Iceape) with concrete issues: CVEs 2008-2785, 2008-2798, 2008-2799, 2008-2800, 2008-2801, 2008-2802, 2008-2803, 2008-2805, 2008-2807, 2008-2808, 2008-2809, 2008-2811, and 2008-2933. Root causes include missing boundary checks i...

CVE-2008-2786

Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes...

Debian Security Advisory DSA 1120-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1120-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian: Security Advisory (DSA-1118)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1134-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1134-1. Several security related problems have been discovered in Mozilla which are also present in Mozilla Thunderbird. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test...

Ubuntu 5.04 / 5.10 : mozilla vulnerabilities (USN-323-1)

Jonas Sicking discovered that under some circumstances persisted XUL attributes are associated with the wrong URL. A malicious website could exploit this to execute arbitrary code with the privileges of the user. MFSA 2006-35, CVE-2006-2775 Paul Nickerson discovered that content-defined setters o...

Ubuntu 5.04 / 5.10 : mozilla-thunderbird vulnerabilities (USN-297-3)

USN-297-1 fixed several vulnerabilities in Thunderbird for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN : Jonas Sicking discovered that under some circumstances persisted XUL...

CVE-2007-2786

CVE-2007-2786 affects Ratbox IRC Daemon (ircd-ratbox) 2.2.5 and earlier. The issue allows remote attackers to cause a denial of service via resource exhaustion by making many requests from a single client. The available documents confirm the vulnerability and affected version range; they do not p...